Tredence Hiring for Manager at Bengaluru, Karnataka, India Full Time

Job Description

JOB DESCRIPTION

Tredence is a data science and AI engineering company focused on solving the last-mile problem in analytics. We define ‘last mile’ as the gap between insight creation and value realization. Tredence is now 1,500+ employees strong with offices in Foster City, Chicago, London, Toronto, and Bangalore, serving 30+ Fortune 500 companies in retail, CPG, hi-tech, telecom, travel, and industrials as clients.
Tredence CISO’s office is accountable for Security and Privacy on all aspects of Tredence’s internal and Client facing business. The team in charge of Security – the Information Security Group (ISG) – focusses on all elements of Information Security for the organization working collaboratively with stakeholders from across its business. The team provides internal as well as external stakeholders assurance while confidential data is being handled to meet business objectives. ISG takes care of implementing, maintaining and reporting of Information Security and its posture using a combination of Policies, Procedures, Guidelines and Cyber Security technology controls on an ongoing basis. The team comprises of two Groups,

• Cyber Security Governance, Risk and Compliance (GRC) and,

Cyber Security Technical Operations (TechOps)

ROLE

Responsibilities

• In this role in CDC (under the TechOps group), you will be accountable for Incident Management in the organization and governance of the Managed Security Services Provider (MSSP) who provides 24×7 SOC services
• You will engage in periodic SOC governance interactions with the MSSP team to review the service level performance as well as quality of service overall
• You will work with the MSSP on alerts / incidents raised and reports shared to perform appropriate root cause analysis (RCA) and drive the necessary decision workflows for incident investigations and/or management reporting
• You will coordinate with stakeholders to implement required controls or their enhancements as deem fit basis the outcome of the RCA
• You will ensure global visibility of the organizational landscape for complete collection of relevant security telemetry for ongoing SOC analysis and alerts
• You will pursue industry leading solutions to consider embedding capabilities of Threat Hunting, Cyber Threat Intelligence (CTI) into SIEM to be able to independently review and correlate Indicators of Compromise (IoCs), Common Vulnerabilities and Exposures (CVEs), learnings from Dark Web and relevant cyber events in relation to the organization’s environment for proactive threat identification, response and prevention; And contribute to the continuous improvement program of security controls posture
• You will monitor organizational security posture from a real-time, external security benchmarking perspective to proactively identify security issues and drive mitigations for the same in coordination with relevant stakeholders
• You will keep abreast with the latest events pertaining to the Global Cyber Security Threat landscape so as to consider critical Cyber Security stack upgrades for the organization on priority and closely work with Security Engineering to pilot, shortlist and implement the required tools to meet the Cyber Security objectives from a CDC standpoint
• You will ensure a comprehensive Incident Management Policy and Process is built and institutionalized
• You will focus on raising awareness through periodic publishing of Global Cyber Security Threat Landscape Trends and Analysis to key stakeholders
• In coordination with Governance, Risk and Compliance (GRC) team, conduct periodic Cyber Security Table Top Exercises (TTE) and simulations to assess the organization’s preparedness on Cyber Resilience and associated control enhancement exercises to help address any identified gaps from the same
• Coordinate with and/or be the liaison for Customers and Government bodies (e.g.: CERT-In) on all matters pertaining to Cyber Security Incident Management
• You will build a comprehensive CDC Metrics initiative which will be used for CDC reviews and CISO reporting
• You will participate in functional and group level meetings with stakeholders and provide your subject matter expertise and leadership as deem fit

Knowledge expectations

• You are a thought leader and come with at least 7 years of Information Security experience handling diverse security domains and teams
• You come with a strong knowledge and implementation experience in various areas of Security Operations Centers (SOC) from its conceptualization to build and operate 24×7
• You have extensive experience in conducting full lifecycle of incident investigation till its closure, including evidence chain of custody, conducting related interviews, stakeholder liaisoning, forensic investigations and report generation
• You are well versed with the Lockheed Martin Cyber Kill Chain, MITRA ATT&CK Framework and Incident Response in alignment with ISO 27035 together with all relevant SOC Policies and Procedures
• You are an expert in analysing CTI, performing Threat Hunting, Dark web monitoring, creating intelligent playbooks and handling SOC teams to help identify and respond to cyber threats as well as recover from the same
• You are well versed with Security Orchestration, Automation and Response (SOAR) technologies to be able to assess SOC Analyst performance and investigation steps so they may be considered for appropriate playbook automation and drastically improve Analyst performance
• You have a good understanding of various leading Information Security Standards and Frameworks such as, but not limited to, Information Security Management System (ISO 27001), NIST Cyber Security Framework (NIST), NIST 800-53, PCI DSS, HIPAA, SSAE-18 SOC 1 or SOC 2 and SoX controls, having directly or indirectly been part of such implementations over the years
• You have a good understanding of essential security controls in one or more of the following Cloud platforms – Microsoft Azure, Amazon Web Services (AWS), Google Cloud Platform (GCP)

Required education and certifications

• You are an Engineering graduate, have an equivalent or higher education
• You have acquired one or more of the following certifications – CISSP, CISM, CCSP, ISO 27001 Lead Implementer / Auditor, Azure, AWS and GCP Certifications

Skill expectations and others

• You nurture and inspire the team to achieving continuous learning and growth
• You come with a mix of strong technical, analytical and problem-solving skills
• You have great attention to detail, project management, strong communication, collaboration and influencing skills; including working with executive leadership in organizations
• You are regular panellist or speaker in Information Security conferences and round tables
• You are part of industry forums which focusses on contributing on various topics of Information Security
• You come with a mindset of helping improve the Information Security Program being able to switch between tactical as well as strategic decisions from time to time
• You are a self-starter, a go getter and an innovative thinker with a positive attitude

LOCATION
Bangalore, Karnataka, India

EDUCATION/QUALIFICATION
B.E / B. Tech/ Masters

YEARS OF EXPERIENCE
7 to 12 Years

DESIGNATION
Manager – CDC

Job Detail

• Job Id
  JD2249205
• Industry
  Not mentioned
• Total Positions
  1
• Job Type:
  Full Time
• Salary:
  Not mentioned
• Employment Status
  Permanent
• Job Location
  Bengaluru, Karnataka, India
• Education
  Not mentioned
• Experience
  Year